f5f66462166f3f6b0fce4a4274820590_NEIKI | Triage

Sharing

General

Target

f5f66462166f3f6b0fce4a4274820590_NEIKI
Size

119KB
MD5

f5f66462166f3f6b0fce4a4274820590
SHA1

c47a90c204413df2c839b57a4dc5596c44ce7dab
SHA256

5a23aef35d5eb8e73055bc9b00d99f6116c6ba22b885b66fcb950962ac9f7201
SHA512

4d80d827fa0d2b82b7ba73d3499c4ee508ccd6f0b99201e964e6690d5165188bda7e364a784c5d432f617e913b5bbfd9ee77e31b3c0e6f88289c0acf2c5f6c5c
SSDEEP

3072:uO9fv/TlNCwXgsTiqUZF36BCBH3EZkC5Dlm5ZNJT:l9fXTl1XNiqIqCBHclSt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f66462166f3f6b0fce4a4274820590_NEIKI

Files

f5f66462166f3f6b0fce4a4274820590_NEIKI
.exe windows:4 windows x86 arch:x86

cd38f05408d5284a115b86e04afcb697

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenThread
CreateTimerQueue
OpenThreadToken
K32GetDeviceDriverBaseNameW
ActivateActCtx
TermsrvGetWindowsDirectoryA
MapViewOfFile
SetVDMCurrentDirectories
GetCommConfig
timeGetTime
ReadConsoleOutputCharacterW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE